Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,564 stories synthesized.
Key findings • 15 vulnerabilities disclosed simultaneously for NVIDIA Dynamo for Linux on August 4, 2026. • Critical vulnerability CVE-2026-24254 allows code execution, privilege escalation, …
Microsoft Defender's new device isolation feature autonomously contained a ransomware attack at QNET within 128 seconds, preventing further spread by cutting off network connectivity.
Cisco Talos researchers discovered that basic social engineering tactics, such as claiming ownership of systems or participation in bug bounties, can easily trick AI models into assisting with malicious activities.
Airlock Digital introduces Agentic AI Control & Governance, a new endpoint security feature that provides visibility and policy management for trusted AI agents operating on organizational endpoints.
Mallory launches an AI-native Threat and Exposure Management platform integrating threat intelligence, exposure context, and automated response capabilities.
Las Vegas gears up for Hacker Summer Camp, where agentic AI, its security implications, and autonomous hacking operations are set to be the dominant themes across Black Hat, DEF CON, and BSides.
A hard-coded Bluetooth key in Acrisure KARR BT and DR-100 systems allows attackers to issue unauthorized commands, potentially controlling vehicle functions.
Żabka, Poland's largest convenience store chain, confirmed a cyberattack in late July that compromised internal systems through a compromised third-party contractor account, though customer data and operations remain unaffected.
Attackers are leveraging Generative AI and Adversary-in-the-Middle (AiTM) kits to bypass multi-factor authentication and traditional email gateways, with users falling victim in seconds.
Microsoft's bug bounty program awarded a record $20 million to 562 researchers in its latest fiscal year, driven by AI advancements and a broader scope including third-party and open-source code.
Cybercriminals are cloning popular AI tool repositories on GitHub, injecting infostealer malware to target developers and steal sensitive information.
Six critical remote code execution vulnerabilities have been found in Flowise, an open-source AI workflow server platform, potentially exposing sensitive data and connected systems.
Researchers demonstrate how attackers can exploit AI assistants integrated into email platforms to bypass security measures, impersonate users, and facilitate financial fraud.
ServiceNow is accelerating its Autonomous Security vision with six integrated solutions designed to deliver AI-native, prevention-first cyber defense.
SentinelOne's latest analysis outlines how AI agents introduce new attack vectors across endpoints, identities, and cloud workloads, proposing a unified platform approach to their security.
A sophisticated npm worm has compromised hundreds of packages, including those in the Keyv and Cacheable namespaces, spreading malicious code and implanting hooks for VS Code and potentially Claude.
Snyk introduces Evo Continuous Offensive Security (COS), an AI-driven platform for autonomous application pentesting and agent red teaming to uncover exploitable vulnerabilities.
A sophisticated campaign dubbed SMOKE#SCREEN is using social engineering tactics with fake Adobe and Zoom updates to install ConnectWise ScreenConnect, granting attackers persistent remote access.
Palo Alto Networks' AI-powered NOVA system has autonomously identified 14,090 previously unknown vulnerabilities in open-source software, with 40% rated high or critical severity, highlighting the accelerating pace of AI-driven vulnerability discovery.
Cloudflare unveils the Agent Development Lifecycle (ADLC), a new framework to manage AI agents throughout the software development process, treating them as customers with dedicated tools and APIs.
Cloudflare launches Cloudflare Agents, a new platform for deploying and managing hosted AI agents, starting with advanced observability features.
Cloudflare has implemented an AI-powered code reviewer and technical design analyzer, leveraging its internal Codex knowledge base to enforce engineering standards and block non-compliant code.
A flaw in the AI meeting transcription tool tl;dv, stemming from a Google Firebase misconfiguration, allowed unauthorized access to user data and potential entry into video calls.
Cloudflare details its success in drastically reducing GitHub issues for the Astro project by implementing an AI-powered automated triage pipeline called 'Flue'.